Disclosed is an operation method for a dynamic analyzer for analyzing an execution state of a web application. The present invention comprises the steps of: analyzing an execution state of the web application on the basis of a final attack string including a parameter which indicates a particular operation to be executed through the web application; and performing an analysis of the execution state of the web application, wherein the final attack string is generated so as to avoid filtering logic which is designed to filter a raw attack string including a predefined parameter. Therefore, the present invention can detect a security vulnerability, which cannot be detected by the existing dynamic analyzer, through easy generation of a final attack string capable of bypassing filtering.
Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.
2. The operation method of claim 1, wherein the specific operation to be executed through the web application includes at least one of a distributed denial of service (DDoS) attack operation, a cross site scripting phishing (XSS) attack operation, an advanced persistent threat (APT) attack operation, a password cracking attack operation, a keylogging attack operation, a spoofing attack operation, and a rootkit attack operation.
4. The operation method of claim 3, wherein the specific operation to be executed through the web application includes at least one of a distributed denial of service (DDoS) attack operation, a cross site scripting phishing (XSS) attack operation, an advanced persistent threat (APT) attack operation, a password cracking attack operation, a keylogging attack operation, a spoofing attack operation, and a rootkit attack operation.
This invention relates to cybersecurity and web application security, specifically addressing the need to detect and mitigate malicious operations executed through web applications. The method involves identifying and analyzing specific malicious activities performed via web applications to enhance security measures. The identified operations include distributed denial of service (DDoS) attacks, cross-site scripting (XSS) phishing attacks, advanced persistent threat (APT) attacks, password cracking attacks, keylogging attacks, spoofing attacks, and rootkit attacks. Each of these operations represents a distinct type of cyber threat that can compromise system integrity, data confidentiality, or user privacy. The method focuses on detecting these attacks when they are initiated or executed through a web application, allowing for timely intervention and mitigation. By recognizing these specific malicious activities, the system can implement countermeasures such as blocking malicious traffic, isolating affected components, or alerting security personnel. This approach improves the ability to defend against a wide range of cyber threats that exploit web applications as attack vectors. The invention aims to provide a comprehensive solution for identifying and neutralizing various types of cyberattacks that target web-based systems.
6. The server of claim 5, wherein the specific operation to be executed through the web application includes at least one of a distributed denial of service (DDoS) attack operation, a cross site scripting phishing (XSS) attack operation, an advanced persistent threat (APT) attack operation, a password cracking attack operation, a keylogging attack operation, a spoofing attack operation, and a rootkit attack operation.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
July 28, 2016
November 8, 2022
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.